FileFix malware represents a sophisticated threat that successfully evades Windows security mechanisms through advanced anti-analysis techniques and legitimate process abuse. This malware family employs process hollowing, reflective DLL injection, and NTFS Alternate Data Streams to maintain persiste
A stock exchange executive’s Microsoft Outlook email account was compromised for approximately 150 days in a sophisticated cyber espionage operation. The attacker maintained persistent access to highly sensitive financial communications, corporate strategies, and confidential market information. Thi
CISA has added a new critical vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild. Federal agencies have 21 days to apply patches or discontinue use of affected products. The addition signals immediate threat to organizations using the vulne
Cybercriminals are launching sophisticated phishing campaigns using fraudulent purchase orders to distribute JS.MonoGlyphRAT, a JavaScript-based remote access trojan (RAT). The malware targets US enterprises through convincing business email compromise tactics, establishing persistent backdoor acces
Five critical zero-day vulnerabilities in OpenClaw, a popular AI agent orchestration framework, allow attackers to hijack legitimate AI agent sessions, execute arbitrary code, and manipulate agent behaviors. The flaws affect authentication mechanisms, input validation, and session management, enabli
A security researcher has publicly released proof-of-concept exploits for multiple Microsoft vulnerabilities, bypassing responsible disclosure protocols in protest of the company’s vulnerability handling practices. The leaked exploits target Windows components and could enable attackers to escalate
Russia’s Federal Security Service (FSB) has publicly accused foreign intelligence agencies of orchestrating a sophisticated mobile malware campaign targeting Russian government officials’ iPhones. The FSB claims thousands of devices from domestic users and foreign diplomatic missions were compromise
A financial institution operated with untested security controls for nearly a year, exposing critical banking infrastructure to potential exploitation. The incident highlights systemic failures in vulnerability management programs, where security testing gaps created an unknown risk exposure window.
Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac
A critical vulnerability (CVE-2025-22031) in Apache ActiveMQ allows attackers to inject malicious security headers, potentially leading to authentication bypass and unauthorized access. The flaw affects versions prior to 6.1.4 and 5.18.7, with proof-of-concept exploits already circulating. Organizat